[PATCH 08/21] Mapped CCI-001157 to requirement_unclear.
Shawn Wells
shawn at redhat.com
Tue Jul 3 23:37:34 UTC 2012
On 7/3/12 6:52 PM, Willy Santos wrote:
> CCI-001157 requires associating security attributes with information exchanged between information systems. This mapping is a request for input/discussion.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
> rhel6/src/input/auxiliary/srg_support.xml | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index c0cac62..6261c13 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -38,7 +38,7 @@ The requirement is impractical or out of scope.
> <description>
> It is unclear how to satisfy this requirement.
> </description>
> -<ref disa="20,31,218,219,224,1097,1159,1125,1126,1140,1143,1149" />
> +<ref disa="20,31,218,219,224,1097,1159,1125,1126,1140,1143,1149,1157" />
> </Group> <!-- end requirement_unclear -->
>
> <Group id="new_rule_needed">
SRG-OS-000177 CCI-001157 The operating system must associate security
attributes with information exchanged between information systems. When
data is exchanged between information systems, the security attributes
associated with the data needs to be maintained. Security attributes are
an abstraction representing the basic properties or characteristics of
an entity with respect to safeguarding information; typically associated
with internal data structures (e.g., records, buffers, files) within the
operating system and used to enable the implementation of access control
and flow control policies, reflect special dissemination, handling or
distribution instructions, or support other aspects of the information
security policy. Security attributes may be explicitly or implicitly
associated with the information contained within the information system.
This can be accomplished with CIPSO or IPSec Labelling, but
impractical_guidance for a general purpose security guide. We should
re-address whenever we tackle CNSS 12-53 though.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120703/53f776fb/attachment.html>
More information about the scap-security-guide
mailing list